$ rpki-client -vvf repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft File: 977D89E37F6F6C3815B2BC731E694AB878F26F30.mft (raw, json) Hash identifier: ipyNf1VGmT0RO0mqnP2wJJrpda5oJ2/GXo7EvMz1sEw= Subject key identifier: F1:9D:25:87:A0:D0:8C:58:9B:0D:70:40:9D:5D:D7:33:87:8B:06:5A Authority key identifier: 97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30 Certificate issuer: /CN=977D89E37F6F6C3815B2BC731E694AB878F26F30 Certificate serial: 29AB108262262545304D51634DCC867220547256 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft Manifest number: 019C Signing time: Tue 03 Jun 2025 10:02:38 +0000 Manifest this update: Tue 03 Jun 2025 09:57:38 +0000 Manifest next update: Fri 06 Jun 2025 16:00:38 +0000 Files and hashes: 1: 3130332e33312e34322e302f32342d3234203d3e2039333431.roa (hash: NcNTdHcRodSJZLKLz640cCIZx0mxCUPWUiWbg907HuU=) 2: 977D89E37F6F6C3815B2BC731E694AB878F26F30.crl (hash: uapxjiPxgMoB87D0jT0GiBaEMY51bkDFCWaTykCqHJU=) 3: 3130332e33312e34322e302f32332d3233203d3e2039333431.roa (hash: y45woR+frHwDPz+XrJyAsnYy051jps7RCl331frKeSU=) 4: 3130332e33312e34332e302f32342d3234203d3e2039333431.roa (hash: JUjPAOstxtzy3e2XRAdy16cqHuucp6sj9RxrkFhDS3Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:ab:10:82:62:26:25:45:30:4d:51:63:4d:cc:86:72:20:54:72:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=977D89E37F6F6C3815B2BC731E694AB878F26F30 Validity Not Before: Jun 3 09:57:38 2025 GMT Not After : Jun 6 16:00:38 2025 GMT Subject: CN=F19D2587A0D08C589B0D70409D5DD733878B065A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6b:b3:06:10:f3:96:d5:aa:3c:4c:a3:97:8b: e2:a5:a7:3c:cc:e3:49:ff:6b:c1:ea:c1:16:5d:6a: 6c:14:25:39:46:99:ff:eb:1d:81:de:df:bb:c8:f2: df:fd:2c:9b:f3:bc:a4:ec:20:e7:f1:98:7f:e3:a8: 36:14:95:78:21:26:97:8e:da:67:e6:e5:95:6e:d6: 7a:2c:25:fe:96:ea:6d:66:dc:6e:0d:4e:76:65:da: c5:c9:19:10:fc:91:2b:c1:c7:97:b5:1c:04:3b:0a: 60:61:5f:63:47:c6:78:62:a0:f3:db:71:6c:d6:16: 09:33:66:55:89:62:84:52:35:3e:18:bd:1f:38:15: e2:5b:25:6e:c3:d6:15:25:1c:d6:8f:14:ec:fe:6e: 33:44:f8:f4:6a:77:2b:d6:af:f4:61:c6:57:c3:8d: 30:20:6e:85:d7:da:24:76:7a:f4:a0:0d:33:95:78: ba:53:6e:d3:ac:1a:5b:4a:aa:23:eb:8c:c8:eb:f5: 89:c4:d6:51:f2:8a:04:3b:bf:c8:99:32:59:9c:64: aa:90:a7:28:50:c2:af:47:58:49:2f:e8:a6:94:a8: 4c:2e:69:b0:d5:5d:3f:0d:25:55:5f:d2:01:3e:a5: e8:ac:cc:95:f1:7b:43:3e:cf:83:fa:be:b5:65:99: f5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:9D:25:87:A0:D0:8C:58:9B:0D:70:40:9D:5D:D7:33:87:8B:06:5A X509v3 Authority Key Identifier: keyid:97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:d4:2c:63:fa:36:13:60:a1:2b:64:df:6b:39:4b:42:b4:bc: c7:a9:8b:e8:7a:57:12:43:7a:94:bd:db:ea:bb:7f:0e:32:e9: 53:9e:a7:78:8e:02:1d:d3:fd:e7:4a:20:1f:56:e1:3c:79:ad: d7:be:74:a4:2b:cf:ca:13:8f:3e:45:46:0c:12:ca:79:67:01: 9a:76:e9:59:38:e4:4c:a8:03:35:58:95:a8:d4:3f:ec:47:dc: a8:1d:bd:88:36:71:09:6b:d6:b8:6f:f8:29:f3:61:d1:7f:e1: 1a:46:71:80:cc:5d:bf:65:28:eb:e2:9e:0a:91:bb:60:a3:73: ee:3d:2a:90:b1:6d:d0:32:0c:42:fa:64:10:65:45:57:b7:4e: 5b:8e:6a:6a:10:95:75:ab:90:4e:77:2f:6f:9e:de:a5:0c:32: 67:e9:82:f6:1b:31:49:c3:db:57:07:9b:c7:92:8a:96:a7:df: 94:32:78:37:63:2c:89:25:eb:ed:97:9f:d1:bc:52:62:34:7a: 2d:36:ba:17:29:29:ca:f6:7a:2a:2c:95:65:e8:3b:1f:2d:15: 89:1f:64:73:97:b4:95:9b:93:56:f2:8d:6e:8f:40:d0:bb:00: f2:bc:cf:1b:3c:ef:77:d3:cb:37:04:1b:61:12:a6:d2:a6:e0: ff:6c:2b:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKasQgmImJUUwTVFjTcyGciBUclYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRBQjg3 OEYyNkYzMDAeFw0yNTA2MDMwOTU3MzhaFw0yNTA2MDYxNjAwMzhaMDMxMTAvBgNV BAMTKEYxOUQyNTg3QTBEMDhDNTg5QjBENzA0MDlENURENzMzODc4QjA2NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCla7MGEPOW1ao8TKOXi+KlpzzM 40n/a8HqwRZdamwUJTlGmf/rHYHe37vI8t/9LJvzvKTsIOfxmH/jqDYUlXghJpeO 2mfm5ZVu1nosJf6W6m1m3G4NTnZl2sXJGRD8kSvBx5e1HAQ7CmBhX2NHxnhioPPb cWzWFgkzZlWJYoRSNT4YvR84FeJbJW7D1hUlHNaPFOz+bjNE+PRqdyvWr/RhxlfD jTAgboXX2iR2evSgDTOVeLpTbtOsGltKqiPrjMjr9YnE1lHyigQ7v8iZMlmcZKqQ pyhQwq9HWEkv6KaUqEwuabDVXT8NJVVf0gE+peiszJXxe0M+z4P6vrVlmfXrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8Z0lh6DQjFibDXBAnV3XM4eLBlowHwYDVR0j BBgwFoAUl32J439vbDgVsrxzHmlKuHjybzAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZTRhY2UxMS05MTM5LTQ0ODUtYWJhOS0wNGJlZGRjNWJjMjYvMC85NzdEODlFMzdG NkY2QzM4MTVCMkJDNzMxRTY5NEFCODc4RjI2RjMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRBQjg3OEYy NkYzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmU0YWNlMTEtOTEzOS00NDg1LWFi YTktMDRiZWRkYzViYzI2LzAvOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRB Qjg3OEYyNkYzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEPULGP6NhNgoStk32s5S0K0vMepi+h6VxJD epS92+q7fw4y6VOep3iOAh3T/edKIB9W4Tx5rde+dKQrz8oTjz5FRgwSynlnAZp2 6Vk45EyoAzVYlajUP+xH3KgdvYg2cQlr1rhv+CnzYdF/4RpGcYDMXb9lKOvingqR u2Cjc+49KpCxbdAyDEL6ZBBlRVe3TluOamoQlXWrkE53L2+e3qUMMmfpgvYbMUnD 21cHm8eSipan35QyeDdjLIkl6+2Xn9G8UmI0ei02uhcpKcr2eioslWXoOx8tFYkf ZHOXtJWbk1byjW6PQNC7APK8zxs873fTyzcEG2ESptKm4P9sK1w= -----END CERTIFICATE-----Generated at Tue Jun 3 23:44:33 2025 by rpki-client